Pro Ledger
v1.0.2Pro Ledger integration. Manage Accounts, Contacts, Invoices, Reports. Use when the user wants to interact with Pro Ledger data.
⭐ 0· 77·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'Pro Ledger integration' and the SKILL.md exclusively documents using the Membrane CLI to connect to Pro Ledger, list/run actions, and proxy API calls — these requirements are coherent with the stated purpose.
Instruction Scope
Runtime instructions are limited to installing and using the Membrane CLI, logging in, creating/listing connections, discovering/running actions, and proxying requests via Membrane. There are no instructions to read unrelated local files, environment variables, or to exfiltrate data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec). It recommends installing @membranehq/cli via npm -g; that is a typical, expected step but it does modify the host environment and pulls code from npm (moderate trust required).
Credentials
The skill declares no environment variables or credentials. All auth is delegated to the Membrane service/CLI as described, which is proportional to the integration task. The skill does not request unrelated secrets.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills' configurations. Autonomous invocation remains enabled (platform default) but is not combined with other concerning privileges.
Assessment
This skill is coherent: it delegates auth and API calls to the Membrane CLI/service rather than asking for local API keys. Before installing, confirm you trust the '@membranehq/cli' npm package and the Membrane service (review the npm package page, GitHub repo, and privacy/security docs). Installing with npm -g will add a global binary — if you prefer not to modify your system globally, use the npx examples shown in the SKILL.md. When you create a Pro Ledger connection via Membrane, the connector will have access to the Pro Ledger account data you authorize, so use least-privilege/test credentials if possible and review the connection's permissions. If you need higher assurance, inspect the Membrane CLI source code or run it in an isolated environment before granting access to production data.Like a lobster shell, security has layers — review code before you run it.
latestvk974v1yqrgabmyg1aw4jxs3r6s842m8e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.